Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ERT90AYl6_M9m5HSazoSAVOO-Qo.roa
File: ERT90AYl6_M9m5HSazoSAVOO-Qo.roa (raw, json)
Hash identifier: 05F87151anx5kuGtdGQPAIwK0PIeCjiPODyMhtgvSV8=
Subject key identifier: 11:14:FD:D0:06:25:EB:F3:3D:9B:91:D2:6B:3A:12:01:53:8E:F9:0A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D77361460DFA3FA4D1AEF8967ABC46A2F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ERT90AYl6_M9m5HSazoSAVOO-Qo.roa
Signing time: Fri 10 Apr 2026 11:45:26 +0000
ROA not before: Fri 10 Apr 2026 11:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213051
IP address blocks: 151.245.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 17:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:36:14:60:df:a3:fa:4d:1a:ef:89:67:ab:c4:6a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 10 11:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1114fdd00625ebf33d9b91d26b3a1201538ef90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:42:c0:cf:58:77:c1:62:04:e9:db:67:8b:
8e:2b:69:88:09:3b:80:67:0d:d6:87:35:d7:ce:a4:
6f:1a:ea:b6:fc:d8:d5:8e:52:c2:be:3e:0f:ac:26:
5c:ed:b4:10:21:9d:56:f4:ef:a0:9d:20:23:5a:25:
ce:4d:85:2b:a2:96:d9:1a:b7:11:c8:e7:36:d8:83:
ec:5a:67:ea:e1:dd:f8:a4:34:47:1d:ce:47:ea:58:
e2:d8:cf:d1:65:0b:34:7c:fa:b3:71:71:a2:73:c9:
53:90:1c:d2:85:eb:b0:c8:bc:fe:2f:d9:cb:cb:ef:
3d:67:6f:e9:4d:d8:c7:8d:5d:8d:b9:dc:a0:4d:cf:
13:38:7c:d7:fc:f1:aa:3f:12:9f:db:a5:c8:32:35:
49:cb:fd:2b:99:ab:84:07:8f:4d:8b:79:ce:60:b7:
ff:9a:4f:5f:2a:02:8c:c2:7b:1c:59:39:01:f2:3a:
ea:fd:5b:5b:7b:e6:d8:ef:4f:2e:6e:3f:17:3d:8a:
47:c6:ca:bb:19:b8:92:29:39:70:82:cf:d4:68:04:
57:f6:ee:e6:bf:b9:2b:c0:82:f9:3b:10:da:80:bb:
dd:36:1e:9e:6f:64:b1:c8:a3:43:19:93:9d:ba:67:
f7:32:24:c2:79:0d:f7:b6:fe:26:36:ab:71:ea:ac:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:FD:D0:06:25:EB:F3:3D:9B:91:D2:6B:3A:12:01:53:8E:F9:0A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ERT90AYl6_M9m5HSazoSAVOO-Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:eb:b9:4b:55:36:b0:9b:90:5d:b5:3a:51:a9:27:ff:47:d2:
69:2b:39:92:75:d6:1f:e5:55:b1:72:00:b6:0c:c8:5d:e5:c2:
b5:e6:4d:0e:d9:92:e5:16:26:94:70:27:7f:67:09:d5:35:73:
47:81:7e:c1:cb:d0:01:e8:78:32:bd:ce:45:44:bb:05:80:35:
95:08:a8:38:e7:2a:5d:2e:5a:38:58:6d:6a:b5:c9:80:bc:c5:
0f:8d:ca:71:2b:1a:e8:96:62:cb:1d:6d:9d:51:22:3b:0e:7c:
c3:99:3c:78:19:c2:bb:62:07:25:88:5a:15:d6:29:16:8f:bf:
6d:d9:ac:8e:8e:b7:16:ef:5a:bf:b3:10:08:00:7a:1c:e8:8e:
63:0e:57:c8:3c:48:4b:0b:59:d5:c5:97:20:1d:83:ac:1f:8e:
93:f2:aa:88:51:f0:1c:3e:93:8b:ec:96:7f:b8:6d:64:e8:b3:
3e:76:d9:29:e7:52:27:c0:03:2b:a2:ae:06:b2:25:d7:77:19:
db:30:a9:25:58:e4:1e:88:6c:f6:e1:6b:06:53:11:9b:ff:ac:
48:4a:25:fc:af:16:fd:bd:13:cf:f5:c8:c7:e1:b7:68:20:80:
1c:50:09:9c:5d:30:3b:71:a4:d2:d2:87:e9:9f:98:59:7a:38:
e9:11:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:12:54 2026 by rpki-client